HTML/Brocoiner

Summary

This malware is a JavaScript cryptocurrency miner that is being served on web pages. When a computer visits one of these web pages, this JavaScript malware launches locally and uses the computer's resources to mine cryptocurrency. Such mining activities can be resource intensive and can cause visiting computers to slow down.

Known samples of this malware have been observed mining Monero coin, a type of cryptocurrency. These samples were found in websites providing:

Streaming videos

Adult content

Shopping

Some sites hosting this malware appear legitiate and might have been compromised for this purpose.

Use the following free Microsoft software to detect and remove this threat:

Get more help

Threat behavior

This JavaScript cyrptocurrency mining client has been found served by multiple web pages, including streaming video sites, adult sites, and shopping sites. Some of these sites could be compromised.

This cryptocurrency miner is designed to work on multiple browsers. It has been observed to mine Monero coin (XMR), a type of cryptocurrency. All mined coins are credited to this malware's operators.

Like other cryptocurrency miners, this malware works by performing highly complex computations—a process that can be CPU intensive. As a result, computers that visit the pages serving this JavaScript can slow down significantly.

Samples of this malware have been found using JavaScript libraries in the following URLs: